High severity8.1NVD Advisory· Published Oct 25, 2024· Updated Jun 17, 2026

CVE-2024-47005

Description

Sharp and Toshiba Tec MFPs provide configuration related APIs. They are expected to be called by administrative users only, but insufficiently restricted. A non-administrative user may execute some configuration APIs.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Toshibatec/MFPsllm-create
Sharp/MFPsllm-fuzzy
Sharp Corporation/Sharp Digital Full-color MFPs and Monochrome MFPsv5
Range: see the information provided by Sharp Corporation
Toshiba Tec Corporation/e-STUDIO 1058v5
Range: T1.01.h4.00 and earlier versions
Toshiba Tec Corporation/e-STUDIO 1208v5
Range: T1.01.h4.00 and earlier versions
Toshiba Tec Corporation/e-STUDIO 908v5
Range: T2.12.h3.00 and earlier versions

Patches

Vulnerability mechanics

References

global.sharp/products/copier/info/info_security_2024-10.htmlnvdVendor Advisory
jvn.jp/en/vu/JVNVU95063136/nvdThird Party Advisory
www.toshibatec.com/information/20241025_01.htmlnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.526
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000